Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel 2.6.24-rc1 up to and including 2.6.26.3 allows remote malicious users to cause a denial of service (panic) or possibly have unspecified other impact via a crafted sca_keylength field associated with the SCTP_AUTH_KEY option.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
linux linux kernel 2.6.24.7 |
||
linux linux kernel 2.6.24.2 |
||
linux linux kernel 2.6.25.5 |
||
linux linux kernel 2.6.24 |
||
linux linux kernel 2.6.24.1 |
||
linux linux kernel 2.6.26 |
||
linux linux kernel 2.6.26.3 |
||
linux linux kernel 2.6.25.9 |
||
linux linux kernel 2.6.25.13 |
||
linux linux kernel 2.6.25.3 |
||
linux linux kernel 2.6.26.2 |
||
linux linux kernel 2.6.25.15 |
||
linux linux kernel 2.6.24_rc4 |
||
linux linux kernel 2.6.26.1 |
||
linux linux kernel 2.6.25.8 |
||
linux linux kernel 2.6.24.4 |
||
linux linux kernel 2.6.24.5 |
||
linux linux kernel 2.6.24_rc1 |
||
linux linux kernel 2.6.25.10 |
||
linux linux kernel 2.6.25.1 |
||
linux linux kernel 2.6.25.4 |
||
linux linux kernel 2.6.24.6 |
||
linux linux kernel 2.6.24_rc5 |
||
linux linux kernel 2.6.25.11 |
||
linux linux kernel 2.6.24.3 |
||
linux linux kernel 2.6.25 |
||
linux linux kernel 2.6.25.2 |
||
linux linux kernel 2.6.25.7 |
||
linux linux kernel 2.6.25.14 |
||
linux linux kernel 2.6.25.12 |
||
linux linux kernel 2.6.25.6 |